Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/ZkPIF4XeOO0bFxA7_EdQXdP2_hs.roa
File: ZkPIF4XeOO0bFxA7_EdQXdP2_hs.roa (raw, json)
Hash identifier: 5yZnoSCCrKA2jGe9OFsnwnbUWlWBYTKxtD0JWk3/dXc=
Subject key identifier: 66:43:C8:17:85:DE:38:ED:1B:17:10:3B:FC:47:50:5D:D3:F6:FE:1B
Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial: 0190FD7E334679AA4EE92198B6C9AC074C37
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/ZkPIF4XeOO0bFxA7_EdQXdP2_hs.roa
Signing time: Mon 29 Jul 2024 07:57:04 +0000
ROA not before: Mon 29 Jul 2024 07:57:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211040
IP address blocks: 141.98.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:7e:33:46:79:aa:4e:e9:21:98:b6:c9:ac:07:4c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Validity
Not Before: Jul 29 07:57:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6643c81785de38ed1b17103bfc47505dd3f6fe1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:69:f7:12:4c:d6:e5:71:31:64:7c:a5:0d:
14:41:e4:9d:d6:75:60:7a:04:56:93:e7:ef:81:4d:
8f:35:25:cf:33:36:0d:4e:0d:05:3d:48:f6:72:44:
6a:7e:08:43:4d:65:32:ed:82:1c:87:2d:eb:1b:31:
51:ad:12:b9:7d:5a:72:c8:81:62:aa:37:35:c3:fd:
0f:f8:ad:8f:71:ae:48:67:ff:36:a7:63:67:3b:ee:
10:7a:71:d7:bd:9a:e7:a1:ce:56:8d:58:14:11:6c:
a2:32:7d:92:af:ce:38:91:1c:71:4d:25:8a:b4:f8:
f5:4d:04:ec:ed:cb:3d:ad:8c:7d:f7:a5:c3:4b:e4:
fd:a3:7c:80:c8:49:90:cb:98:30:76:3d:d2:ed:34:
86:9c:22:ee:49:6f:ee:ff:94:f2:e1:08:6f:2c:11:
84:db:07:88:3f:e4:53:66:b9:70:b3:b0:3a:de:40:
3a:c9:b1:1b:52:35:33:dc:af:10:c1:11:fc:59:45:
1d:43:e4:a9:7b:12:f3:f3:e2:11:00:75:87:55:1e:
fc:07:d0:9a:bd:95:fb:44:9a:6f:d8:e0:7b:29:25:
23:b9:55:74:06:31:1a:ff:db:8b:d7:1d:df:bb:f1:
e3:61:08:d2:91:72:77:fe:66:1e:9d:35:81:a0:8c:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:43:C8:17:85:DE:38:ED:1B:17:10:3B:FC:47:50:5D:D3:F6:FE:1B
X509v3 Authority Key Identifier:
keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/ZkPIF4XeOO0bFxA7_EdQXdP2_hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.15.0/24
Signature Algorithm: sha256WithRSAEncryption
71:59:9f:ce:80:38:27:69:d4:bc:c7:82:78:71:40:6b:42:8f:
fb:5d:d0:9c:fc:a1:a6:7b:1e:e2:4c:c6:9e:63:be:c1:96:e0:
39:0f:99:0d:57:1b:e0:be:dd:1d:46:4b:be:b7:4e:76:54:e4:
0c:77:98:06:d5:98:48:a2:bf:6a:15:fa:60:48:6b:89:fd:a8:
90:6b:54:51:0c:50:e0:40:92:f5:1f:f8:f9:81:22:18:58:d9:
29:0f:0b:7a:cb:ad:ff:d3:8a:8d:0d:9c:e2:53:d3:93:3d:e8:
d1:aa:b7:83:f8:c1:01:af:32:0f:cc:14:c5:95:88:9a:9b:18:
32:cb:fd:48:69:bc:02:ed:92:ef:2a:fd:a3:46:e6:06:84:cd:
b9:57:b1:ea:8f:1b:d1:60:b9:5e:2c:c3:99:c5:d9:0f:61:3d:
bd:f9:47:dc:ec:99:6a:6c:5e:7e:4b:bb:5d:71:a9:c2:1d:ef:
55:72:46:12:29:a0:c5:cf:a0:69:7c:59:92:0c:e1:07:35:fd:
41:4c:70:8e:64:90:cd:8b:8a:06:1b:e4:d8:38:cd:13:d4:dd:
51:c8:71:a2:26:e2:69:19:52:d3:fc:28:36:48:2b:62:fd:a4:
5f:4d:7c:33:12:db:0b:53:97:e6:79:ba:68:85:fa:43:67:36:
ba:b5:ca:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:18 2024 by rpki-client on console-fra.rpki-client.org